wallee Subscription Security & Risk Analysis

wordpress.org/plugins/woo-wallee-subscription

Plugin to process Woocommerce Subscriptions with wallee.

10 active installs v1.1.8 PHP + WP 4.7+ Updated Aug 11, 2025
e-commercepaymentwalleewoocommercewoocommerce-wallee
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is wallee Subscription Safe to Use in 2026?

Generally Safe

Score 100/100

wallee Subscription has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7mo ago
Risk Assessment

The "woo-wallee-subscription" v1.1.8 plugin exhibits a generally good security posture based on the provided static analysis. The absence of any identified CVEs, critical taint flows, dangerous functions, file operations, or external HTTP requests is a strong indicator of good development practices. The plugin also demonstrates excellent output escaping, ensuring that user-supplied data is handled safely when displayed.

However, a significant concern arises from the presence of SQL queries that do not utilize prepared statements. While the number of such queries is small (3 total), this practice inherently introduces a risk of SQL injection vulnerabilities if the data used in these queries is not meticulously sanitized beforehand, which the taint analysis did not specifically highlight as a risk in this version. Furthermore, the complete lack of nonce and capability checks across all identified entry points (even though the attack surface is currently zero) is a potential future risk. If the plugin were to introduce new AJAX handlers, REST API routes, or shortcodes in future versions without proper authentication and authorization, these would be immediately unprotected.

Overall, the plugin appears secure for its current functionality. The primary weakness lies in the non-prepared SQL statements and the theoretical future risk if the attack surface grows without security checks. The lack of historical vulnerabilities is a positive sign, but it's crucial to address the existing code-level concerns.

Key Concerns

  • SQL queries not using prepared statements
Vulnerabilities
None known

wallee Subscription Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

wallee Subscription Code Analysis

Dangerous Functions
0
Raw SQL Queries
3
0 prepared
Unescaped Output
0
6 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

0% prepared3 total queries

Output Escaping

100% escaped6 total outputs
Attack Surface

wallee Subscription Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 120
actionadmin_initbuild-woo\src\includes\admin\class-wc-wallee-subscription-admin.php:66
actionadmin_noticesbuild-woo\src\includes\admin\class-wc-wallee-subscription-admin.php:88
filterwoocommerce_subscription_payment_metabuild-woo\src\includes\class-wc-wallee-subscription-gateway.php:50
actionwoocommerce_subscription_validate_payment_metabuild-woo\src\includes\class-wc-wallee-subscription-gateway.php:59
filterwoocommerce_subscriptions_update_payment_via_pay_shortcodebuild-woo\src\includes\class-wc-wallee-subscription-gateway.php:70
filterwc_wallee_gateway_result_send_jsonbuild-woo\src\includes\class-wc-wallee-subscription-gateway.php:195
filterwoocommerce_subscriptions_process_payment_for_change_method_via_pay_shortcodebuild-woo\src\includes\class-wc-wallee-subscription-gateway.php:217
filterwp_redirectbuild-woo\src\includes\class-wc-wallee-subscription-gateway.php:226
actioninitbuild-woo\src\includes\class-wc-wallee-subscription-migration.php:37
actionwpmu_new_blogbuild-woo\src\includes\class-wc-wallee-subscription-migration.php:45
filterwpmu_drop_tablesbuild-woo\src\includes\class-wc-wallee-subscription-migration.php:52
actionadmin_noticesbuild-woo\src\includes\class-wc-wallee-subscription-migration.php:209
actionplugins_loadedbuild-woo\src\woocommerce-wallee-subscription.php:184
filterwc_wallee_enhance_gatewaybuild-woo\src\woocommerce-wallee-subscription.php:217
filterwc_wallee_modify_sesion_create_transactionbuild-woo\src\woocommerce-wallee-subscription.php:224
filterwc_wallee_modify_session_pending_transactionbuild-woo\src\woocommerce-wallee-subscription.php:231
filterwc_wallee_modify_order_create_transactionbuild-woo\src\woocommerce-wallee-subscription.php:238
filterwc_wallee_modify_order_pending_transactionbuild-woo\src\woocommerce-wallee-subscription.php:247
filterwc_wallee_modify_confirm_transactionbuild-woo\src\woocommerce-wallee-subscription.php:256
filterwc_wallee_modify_line_item_orderbuild-woo\src\woocommerce-wallee-subscription.php:266
filterwc_wallee_modify_total_to_check_orderbuild-woo\src\woocommerce-wallee-subscription.php:276
actionwc_wallee_authorizedbuild-woo\src\woocommerce-wallee-subscription.php:286
actionwc_wallee_fulfillbuild-woo\src\woocommerce-wallee-subscription.php:295
filterwoocommerce_valid_order_statuses_for_paymentbuild-woo\src\woocommerce-wallee-subscription.php:304
filterwc_wallee_update_transaction_infobuild-woo\src\woocommerce-wallee-subscription.php:313
filterwc_wallee_confirmed_statusbuild-woo\src\woocommerce-wallee-subscription.php:322
filterwc_wallee_authorized_statusbuild-woo\src\woocommerce-wallee-subscription.php:331
filterwc_wallee_completed_statusbuild-woo\src\woocommerce-wallee-subscription.php:340
filterwc_wallee_decline_statusbuild-woo\src\woocommerce-wallee-subscription.php:349
filterwc_wallee_failed_statusbuild-woo\src\woocommerce-wallee-subscription.php:358
filterwc_wallee_voided_statusbuild-woo\src\woocommerce-wallee-subscription.php:367
actionwcs_after_renewal_setup_cart_subscriptionsbuild-woo\src\woocommerce-wallee-subscription.php:376
filterwoocommerce_subscriptions_is_failed_renewal_orderbuild-woo\src\woocommerce-wallee-subscription.php:385
filterwcs_before_renewal_setup_cart_subscriptionsbuild-woo\src\woocommerce-wallee-subscription.php:396
filterwcs_before_parent_order_setup_cartbuild-woo\src\woocommerce-wallee-subscription.php:405
filterwcs_after_renewal_setup_cart_subscriptionsbuild-woo\src\woocommerce-wallee-subscription.php:414
filterwcs_after_parent_order_setup_cartbuild-woo\src\woocommerce-wallee-subscription.php:423
filterwc_wallee_is_method_availablebuild-woo\src\woocommerce-wallee-subscription.php:432
filterwc_wallee_success_urlbuild-woo\src\woocommerce-wallee-subscription.php:442
filterwc_wallee_checkout_failure_urlbuild-woo\src\woocommerce-wallee-subscription.php:451
actionadmin_initbuild-woo\woo-wallee-subscription\includes\admin\class-wc-wallee-subscription-admin.php:66
actionadmin_noticesbuild-woo\woo-wallee-subscription\includes\admin\class-wc-wallee-subscription-admin.php:88
filterwoocommerce_subscription_payment_metabuild-woo\woo-wallee-subscription\includes\class-wc-wallee-subscription-gateway.php:50
actionwoocommerce_subscription_validate_payment_metabuild-woo\woo-wallee-subscription\includes\class-wc-wallee-subscription-gateway.php:59
filterwoocommerce_subscriptions_update_payment_via_pay_shortcodebuild-woo\woo-wallee-subscription\includes\class-wc-wallee-subscription-gateway.php:70
filterwc_wallee_gateway_result_send_jsonbuild-woo\woo-wallee-subscription\includes\class-wc-wallee-subscription-gateway.php:195
filterwoocommerce_subscriptions_process_payment_for_change_method_via_pay_shortcodebuild-woo\woo-wallee-subscription\includes\class-wc-wallee-subscription-gateway.php:217
filterwp_redirectbuild-woo\woo-wallee-subscription\includes\class-wc-wallee-subscription-gateway.php:226
actioninitbuild-woo\woo-wallee-subscription\includes\class-wc-wallee-subscription-migration.php:37
actionwpmu_new_blogbuild-woo\woo-wallee-subscription\includes\class-wc-wallee-subscription-migration.php:45
filterwpmu_drop_tablesbuild-woo\woo-wallee-subscription\includes\class-wc-wallee-subscription-migration.php:52
actionadmin_noticesbuild-woo\woo-wallee-subscription\includes\class-wc-wallee-subscription-migration.php:209
actionplugins_loadedbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:184
filterwc_wallee_enhance_gatewaybuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:217
filterwc_wallee_modify_sesion_create_transactionbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:224
filterwc_wallee_modify_session_pending_transactionbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:231
filterwc_wallee_modify_order_create_transactionbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:238
filterwc_wallee_modify_order_pending_transactionbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:247
filterwc_wallee_modify_confirm_transactionbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:256
filterwc_wallee_modify_line_item_orderbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:266
filterwc_wallee_modify_total_to_check_orderbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:276
actionwc_wallee_authorizedbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:286
actionwc_wallee_fulfillbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:295
filterwoocommerce_valid_order_statuses_for_paymentbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:304
filterwc_wallee_update_transaction_infobuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:313
filterwc_wallee_confirmed_statusbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:322
filterwc_wallee_authorized_statusbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:331
filterwc_wallee_completed_statusbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:340
filterwc_wallee_decline_statusbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:349
filterwc_wallee_failed_statusbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:358
filterwc_wallee_voided_statusbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:367
actionwcs_after_renewal_setup_cart_subscriptionsbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:376
filterwoocommerce_subscriptions_is_failed_renewal_orderbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:385
filterwcs_before_renewal_setup_cart_subscriptionsbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:396
filterwcs_before_parent_order_setup_cartbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:405
filterwcs_after_renewal_setup_cart_subscriptionsbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:414
filterwcs_after_parent_order_setup_cartbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:423
filterwc_wallee_is_method_availablebuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:432
filterwc_wallee_success_urlbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:442
filterwc_wallee_checkout_failure_urlbuild-woo\woo-wallee-subscription\woocommerce-wallee-subscription.php:451
actionadmin_initincludes\admin\class-wc-wallee-subscription-admin.php:66
actionadmin_noticesincludes\admin\class-wc-wallee-subscription-admin.php:88
filterwoocommerce_subscription_payment_metaincludes\class-wc-wallee-subscription-gateway.php:50
actionwoocommerce_subscription_validate_payment_metaincludes\class-wc-wallee-subscription-gateway.php:59
filterwoocommerce_subscriptions_update_payment_via_pay_shortcodeincludes\class-wc-wallee-subscription-gateway.php:70
filterwc_wallee_gateway_result_send_jsonincludes\class-wc-wallee-subscription-gateway.php:195
filterwoocommerce_subscriptions_process_payment_for_change_method_via_pay_shortcodeincludes\class-wc-wallee-subscription-gateway.php:217
filterwp_redirectincludes\class-wc-wallee-subscription-gateway.php:226
actioninitincludes\class-wc-wallee-subscription-migration.php:37
actionwpmu_new_blogincludes\class-wc-wallee-subscription-migration.php:45
filterwpmu_drop_tablesincludes\class-wc-wallee-subscription-migration.php:52
actionadmin_noticesincludes\class-wc-wallee-subscription-migration.php:209
actionplugins_loadedwoocommerce-wallee-subscription.php:184
filterwc_wallee_enhance_gatewaywoocommerce-wallee-subscription.php:217
filterwc_wallee_modify_sesion_create_transactionwoocommerce-wallee-subscription.php:224
filterwc_wallee_modify_session_pending_transactionwoocommerce-wallee-subscription.php:231
filterwc_wallee_modify_order_create_transactionwoocommerce-wallee-subscription.php:238
filterwc_wallee_modify_order_pending_transactionwoocommerce-wallee-subscription.php:247
filterwc_wallee_modify_confirm_transactionwoocommerce-wallee-subscription.php:256
filterwc_wallee_modify_line_item_orderwoocommerce-wallee-subscription.php:266
filterwc_wallee_modify_total_to_check_orderwoocommerce-wallee-subscription.php:276
actionwc_wallee_authorizedwoocommerce-wallee-subscription.php:286
actionwc_wallee_fulfillwoocommerce-wallee-subscription.php:295
filterwoocommerce_valid_order_statuses_for_paymentwoocommerce-wallee-subscription.php:304
filterwc_wallee_update_transaction_infowoocommerce-wallee-subscription.php:313
filterwc_wallee_confirmed_statuswoocommerce-wallee-subscription.php:322
filterwc_wallee_authorized_statuswoocommerce-wallee-subscription.php:331
filterwc_wallee_completed_statuswoocommerce-wallee-subscription.php:340
filterwc_wallee_decline_statuswoocommerce-wallee-subscription.php:349
filterwc_wallee_failed_statuswoocommerce-wallee-subscription.php:358
filterwc_wallee_voided_statuswoocommerce-wallee-subscription.php:367
actionwcs_after_renewal_setup_cart_subscriptionswoocommerce-wallee-subscription.php:376
filterwoocommerce_subscriptions_is_failed_renewal_orderwoocommerce-wallee-subscription.php:385
filterwcs_before_renewal_setup_cart_subscriptionswoocommerce-wallee-subscription.php:396
filterwcs_before_parent_order_setup_cartwoocommerce-wallee-subscription.php:405
filterwcs_after_renewal_setup_cart_subscriptionswoocommerce-wallee-subscription.php:414
filterwcs_after_parent_order_setup_cartwoocommerce-wallee-subscription.php:423
filterwc_wallee_is_method_availablewoocommerce-wallee-subscription.php:432
filterwc_wallee_success_urlwoocommerce-wallee-subscription.php:442
filterwc_wallee_checkout_failure_urlwoocommerce-wallee-subscription.php:451
Maintenance & Trust

wallee Subscription Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedAug 11, 2025
PHP min version
Downloads6K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

wallee Subscription Developer Profile

wallee

3 plugins · 420 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect wallee Subscription

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/woo-wallee-subscription/assets/css/subscription.css/wp-content/plugins/woo-wallee-subscription/assets/js/subscription.js
Script Paths
/wp-content/plugins/woo-wallee-subscription/assets/js/subscription.js
Version Parameters
woo-wallee-subscription/assets/css/subscription.css?ver=woo-wallee-subscription/assets/js/subscription.js?ver=

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about wallee Subscription